logo

TCPReplay suite 3.0.beta10. Released

ID: bb9fbf6e-ecf9-5e81-ad82-03284982c23e

STIX ID: report--bb9fbf6e-ecf9-5e81-ad82-03284982c23e

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-08-12

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a Windows post‑exploitation tool that extracts browser‑stored credentials (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill entries and browsing history) from major Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes multiple operational evasion features, outputs structured JSON for red‑team use, and is presented with detection and mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.